CVE-2011-3011

BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2011-08-15

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Arcserve D2d (Ca)

References

• http://securityreason.com/securityalert/8338
• http://www.securityfocus.com/archive/1/519234/100/0/threaded
• http://www.securityfocus.com/bid/48897
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B7D3ACC0F-6C01-4BE2-B5C0-C430CEB45BE6%7D